A privacy display comprises a luminance-privacy arrangement and a contrast-privacy arrangement. In a privacy mode of operation, ambient light levels are detected and a visual security level is calculated. At and above a visual security level threshold the luminance-privacy arrangement is operable and below the threshold both the luminance-privacy and contrast-privacy arrangements are operable. Image quality for on-axis users is optimised and high levels of visual security are achieved for off-axis snoopers over a wide range of display illuminance conditions.